Pulist.exe

This command-line tool displays processes running on local or remote computers. PuList is similar to TList (a Support Tool on the Windows 2000 CD), but also lists the user name associated with each process on a local computer.

Specify a local computer by running the tool with no command-line arguments. In this case, PuList displays the process name and ID of each process running on the system and also attempts to obtain the user name associated with each. This usage is valuable if multiple processes are running on the system in different security contexts. PuList provides a mechanism for differentiating such processes.

Specify remote computers by running the tool with one or more computer names on the command line. PuList displays each specified remote computer name followed by a list of its running processes. If an error occurs while it queries process information, an error string is displayed instead of the process information.

Notes

• The ability to obtain the user name from each process depends on whether the caller has sufficient access to the access token in each process. For best results, run PuList from an Administrator account or from the Local System account (running under a service running as Local System).
• Network administrators can use PuList to determine what processes are running on servers and workstations on a network. Furthermore, batch-file developers can redirect the output of the tool to a file and then leverage this information in useful ways. For example, if you know the name of the executable file you want, such as Notepad.exe, the following command line helps narrow your results:

pulist | grep notepad

Note

• Grep is a POSIX utility not installed by the Windows 2000 Resource Kit Setup.

File Required

• Pulist.exe

PuList Topic

• PuList Syntax and Output

top

PuList Syntax and Output

pulist [\\Server] [\\Server] ...

Where:

pulist

without arguments displays the names and IDs of all the processes running on the local computer, and then attempts to display the user name associated with each process.

\\Server

specifies a remote computer or computers to query. PuList displays the computer name followed by the names and IDs of all processes running on it.

If more than one computer is specified in the command line, PuList displays the list for each computer sequentially.

PuList Output

C:\>pulist

Process           PID  User
Idle              0    
System            8    
smss.exe          156  NT AUTHORITY\SYSTEM
csrss.exe         176  NT AUTHORITY\SYSTEM
winlogon.exe      172  NT AUTHORITY\SYSTEM
services.exe      228  NT AUTHORITY\SYSTEM
lsass.exe         240  NT AUTHORITY\SYSTEM
svchost.exe       428  NT AUTHORITY\SYSTEM
spoolsv.exe       452  NT AUTHORITY\SYSTEM
msdtc.exe         480  NT AUTHORITY\SYSTEM
tcpsvcs.exe       604  NT AUTHORITY\SYSTEM
svchost.exe       620  NT AUTHORITY\SYSTEM
llssrv.exe        644  NT AUTHORITY\SYSTEM
nspmon.exe        712  USER1-COMPUTER1\NetShowServices
nscm.exe          724  USER1-COMPUTER1\NetShowServices
regsvc.exe        772  NT AUTHORITY\SYSTEM
RsFsa.exe         812  NT AUTHORITY\SYSTEM
MSTask.exe        896  NT AUTHORITY\SYSTEM
snmp.exe          940  NT AUTHORITY\SYSTEM
suss.exe          996  NT AUTHORITY\SYSTEM
termsrv.exe       1024 NT AUTHORITY\SYSTEM
Dfssvc.exe        1096 NT AUTHORITY\SYSTEM
dns.exe           1112 NT AUTHORITY\SYSTEM
inetinfo.exe      1128 NT AUTHORITY\SYSTEM
mqsvc.exe         1168 NT AUTHORITY\SYSTEM
nspm.exe          1248 USER1-COMPUTER1\NetShowServices
nsum.exe          1384 USER1-COMPUTER1\NetShowServices
RsSub.exe         1512 NT AUTHORITY\SYSTEM
RsEng.exe         1624 NT AUTHORITY\SYSTEM
svchost.exe       1844 NT AUTHORITY\SYSTEM
Explorer.exe      212  USER1-COMPUTER1\Administrator
hh.exe            840  USER1-COMPUTER1\Administrator
msiexec.exe       1888 NT AUTHORITY\SYSTEM
WinMgmt.exe       1404 NT AUTHORITY\SYSTEM
hh.exe            2180 USER1-COMPUTER1\Administrator
mdm.exe           1332 USER1-COMPUTER1\Administrator
IEXPLORE.EXE      1852 USER1-COMPUTER1\Administrator
cmd.exe           2088 USER1-COMPUTER1\Administrator
mmc.exe           1180 USER1-COMPUTER1\Administrator
rpingc.exe        2192 USER1-COMPUTER1\Administrator
pulist.exe        1936 USER1-COMPUTER1\Administrator